
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
File: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft (raw, json)
Hash identifier: g7GZOapcRBTK3WiSOk8/imJRUwIbXy0zTNs7uesOjxs=
Subject key identifier: AA:DD:61:C9:94:9E:E6:3A:94:F9:B5:C3:71:E0:C8:0B:19:F2:7C:45
Authority key identifier: 2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F
Certificate issuer: /CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
Certificate serial: 0198D4DFFDBB5CA9CBD41DA10D712A83CCF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:01:45 +0000
Manifest this update: Sat 23 Aug 2025 03:01:45 +0000
Manifest next update: Sun 24 Aug 2025 03:01:45 +0000
Files and hashes: 1: 9phsu2p4WF8NqnfUkSWWdnt6zzA.roa (hash: f41MILFdl6rcNDj7+ORCxwVOJlnjfxd2bAX97uHKrtw=)
2: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl (hash: af1Dvo0QE1BvmfyJTY0mDKJl/uzOxFnSKc4FFyLoQeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:fd:bb:5c:a9:cb:d4:1d:a1:0d:71:2a:83:cc:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
Validity
Not Before: Aug 23 03:01:45 2025 GMT
Not After : Aug 24 03:01:45 2025 GMT
Subject: CN=aadd61c9949ee63a94f9b5c371e0c80b19f27c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:69:e6:88:c9:f3:b9:c6:cf:21:60:8b:14:f6:
7c:9b:c6:aa:55:24:17:1c:24:8f:33:07:9d:71:f8:
f9:3e:c4:c2:5d:b4:1d:a0:71:17:5e:04:e0:15:7f:
d1:af:c9:c2:44:0a:b0:38:f0:72:b7:26:d1:a5:a3:
45:57:1a:ca:2f:8f:4a:d6:91:4d:76:88:cd:25:4b:
5f:2c:5b:b8:d2:0a:7d:9b:f2:4f:5f:73:8c:8e:a1:
9b:6f:08:eb:52:40:a9:9e:8b:f1:f6:1e:73:0f:1c:
3a:6d:37:0b:14:e6:a4:39:24:4d:ae:b4:76:db:b5:
5d:90:7f:57:9f:45:1d:d8:6f:18:21:9b:1b:db:98:
4b:0d:14:12:de:9f:d0:9a:2a:08:5d:ee:a4:a1:e9:
11:c1:31:1d:4b:78:2e:03:ad:00:7e:e6:34:ba:15:
88:f7:02:c1:0b:8b:16:50:76:a7:b3:5d:aa:6c:57:
1e:19:e7:46:bc:4f:05:f4:41:f6:2f:7b:a7:ff:f0:
4d:87:25:93:27:19:1b:b6:49:b6:e1:3e:3d:82:6c:
c2:b6:19:d5:8c:dd:8a:92:08:c5:cb:cf:b6:36:83:
cf:d9:bd:cd:ae:c4:fd:c9:dc:a5:d9:1e:88:42:a4:
34:e0:4e:ea:08:d1:6b:18:a4:6d:8f:d4:96:77:64:
cc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DD:61:C9:94:9E:E6:3A:94:F9:B5:C3:71:E0:C8:0B:19:F2:7C:45
X509v3 Authority Key Identifier:
keyid:2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:aa:89:8f:67:4b:e3:ad:2f:03:04:ad:e7:ba:16:dc:8e:fa:
f8:9c:df:2b:9b:7a:14:21:0a:11:3e:18:ef:53:2a:48:77:37:
a5:0b:e1:12:88:0f:ad:24:5c:50:84:84:8b:3b:2d:92:73:6b:
45:b1:6a:c9:d7:20:46:24:be:3a:e2:b2:4d:2d:10:23:e0:5a:
6e:76:ac:12:5f:77:73:ff:09:4f:c4:8e:8d:46:13:c8:6f:21:
79:44:c6:b9:db:5e:6d:14:9f:d4:66:8c:f1:6b:f8:c5:fe:1d:
d5:4a:d5:fb:f9:48:fc:ec:dd:53:ce:94:90:72:fd:d1:35:e7:
ae:a1:bf:2f:a8:80:4d:db:1a:ba:40:65:12:f1:bf:27:c9:dc:
fd:77:17:72:16:b3:35:21:8d:39:69:8b:ef:78:1a:99:77:cd:
f2:38:dc:16:7a:1d:3a:01:b5:30:51:2a:4c:b5:a4:b5:db:79:
26:bb:8e:86:60:3a:d1:30:9c:4a:0f:ce:8a:80:67:f6:00:02:
6d:cc:1a:fc:1c:bd:b9:6d:24:75:4d:ab:b8:87:a1:48:f2:76:
05:42:a4:37:2e:b3:3a:99:1e:28:df:11:3a:b8:9d:39:88:f3:
63:50:7f:b8:1d:f5:89:b3:e7:02:bc:4a:7b:6f:d6:33:2b:3e:
ea:13:be:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:22 2025 by rpki-client